Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Lack of Integrity Check

When a container image that is externally sourced is not pinned to their SHA hash, malicious modification of the image...

medium

Unnecessary Privilege

medium CWE-250 container

Unnecessary privilege happens when the process runs under a high privilege account. In the case of a container running with...

medium

Log Injection

medium CWE-117 CWE-93 javascript go ruby python csharp

Log injection happens when untrusted data is stored in logs and does not escaped when used by the downstream component...

high

JWKS Leak

high typescript javascript

JSON Web Key Sets (JWKS) is a standard format for representing a set of cryptographic keys used for implementing digital...

high

JWT Algorithm Confusion

high CWE-347 typescript javascript

JWT Algorithm Confusion (Key Confusion) happens when an adversary can change the key and algorithm used for verifying the token...

high

Weak Credentials

high CWE-798 CWE-1392 CWE-257 CWE-338 CWE-331 typescript ruby javascript go java

The use of weak, easily guessable, or default cryptographic keys significantly increases the risk of unauthorised access and security bypass....

medium

Server Side Request Forgery

medium battle CWE-918 CWE-639 CWE-200 go ruby python javascript typescript

Server Side Request Forgery (SSRF) happens when untrusted input is used to construct requests to other resources, potentially on internal...

high

Secret Disclosure

high incident-response CWE-212 CWE-798 ruby python javascript typescript go

Secrets (API keys, private keys, etc) are exposed in the code repository or source code. Unnecessary exposure of sensitive data...

medium

Insecure Direct Object Reference

medium CWE-639 CWE-425 CWE-340 go java csharp python typescript

Insecure Direct Object Reference (IDOR) occurs when an application exposes internal implementation objects (e.g., database keys, filenames, or record IDs)...

No matching labs found

Try adjusting your search keywords or language filter.